Common use of Bugcrowd Sub-Processors Clause in Contracts

Bugcrowd Sub-Processors. Customer agrees that Bugcrowd may engage sub-processors to Process Personal Data in accordance with the DPA. A list of sub-processors including their addresses is available upon request. The parties agree that copies of the sub-processor agreements that Customer may request Bugcrowd to provide pursuant to Clause 5(i) of the Model Clauses may have all the commercial clauses or clauses unrelated to data processing, removed by Bugcrowd beforehand and, that such copies will be provided by Bugcrowd, in a manner to be determined in its discretion, only upon reasonable request by Customer. When engaging sub-processors, Bugcrowd shall enter into agreements with the sub-processors to bind them to obligations which are substantially similar or more stringent than those set out in this DPA. Customer will not directly communicate with Bugcrowd’s sub-processors about the software or Services, unless agreed to by Bugcrowd in Bugcrowd’s sole discretion. Bugcrowd will notify Customer in advance of any changes to sub- processors using regular communication means such as email, websites, and portals. If Customer reasonably objects to the addition of a new sub-processors (e.g., such change causes Customer to be non-compliant with applicable with Data Protection Laws and Regulations), Customer shall notify Bugcrowd in writing of its specific objections within thirty (30) days of receiving such notification. If Customer does not object within such period, the addition of the new sub-processor and, if applicable, the accession to this DPA shall be considered accepted. If Customer does object to the addition of a new sub- processor and Bugcrowd cannot accommodate Customer’s objection, Customer may terminate the Services and software in writing within sixty (60) days of receiving Bugcrowd’s notification.

Bugcrowd Sub-Processors. Customer agrees that Bugcrowd may engage sub-processors to Process Personal Data in accordance with the DPA. A list of sub-sub- processors including their addresses is available upon request. The parties agree that copies of the sub-processor agreements that Customer may request Bugcrowd to provide pursuant to Clause 5(i) of the Model Clauses may have all the commercial clauses or clauses unrelated to data processing, removed by Bugcrowd beforehand and, that such copies will be provided by Bugcrowd, in a manner to be determined in its discretion, only upon reasonable request by Customer. When engaging sub-processors, Bugcrowd shall enter into agreements with the sub-processors to bind them to obligations which are substantially similar or more stringent than those set out in this DPA. Customer will not directly communicate with Bugcrowd’s sub-processors about the software or Services, unless agreed to by Bugcrowd in Bugcrowd’s sole discretion. Bugcrowd will notify Customer in advance of any changes to sub- sub-processors using regular communication means such as email, websites, and portals. If Customer reasonably objects to the addition of a new sub-processors (e.g., such change causes Customer to be non-compliant with applicable with Data Protection Laws and Regulations), Customer shall notify Bugcrowd in writing of its specific objections within thirty (30) days of receiving such notification. If Customer does not object within such period, the addition of the new sub-processor and, if applicable, the accession to this DPA shall be considered accepted. If Customer does object to the addition of a new sub- sub-processor and Bugcrowd cannot accommodate Customer’s objection, Customer may terminate the Services and software in writing within sixty (60) days of receiving Bugcrowd’s notification.

Bugcrowd Sub-Processors. Customer agrees that Bugcrowd may engage sub-processors to Process Personal Data in accordance with the DPA. A list of sub-sub- processors including their addresses is available upon request. The parties agree that copies of the sub-sub- processor agreements that Customer may request Bugcrowd to provide pursuant to Clause 5(i) of the Model Clauses may have all the commercial clauses or clauses unrelated to data processing, removed by Bugcrowd beforehand and, that such copies will be provided by Bugcrowd, in a manner to be determined in its discretion, only upon reasonable request by Customer. When engaging sub-processors, Bugcrowd shall enter into agreements with the sub-processors to bind them to obligations which are substantially similar or more stringent than those set out in this DPA. Customer will not directly communicate with Bugcrowd’s sub-processors about the software or Services, unless agreed to by Bugcrowd in Bugcrowd’s sole discretion. Bugcrowd will notify Customer in advance of any changes to sub- sub-processors using regular communication means such as email, websites, and portals. If Customer reasonably objects to the addition of a new sub-processors (e.g., such change causes Customer to be non-compliant with applicable with Data Protection Laws and Regulations), Customer shall notify Bugcrowd in writing of its specific objections within thirty (30) days of receiving such notification. If Customer does not object within such period, the addition of the new sub-processor and, if applicable, the accession to this DPA shall be considered accepted. If Customer does object to the addition of a new sub- processor and Bugcrowd cannot accommodate Customer’s objection, Customer may terminate the Services and software in writing within sixty (60) days of receiving Bugcrowd’s notification.